URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 196.251.114.181
Firstseen:2025-08-10 12:42:05 UTC
Total malware sites :18
Online malware sites :0 (0%)
Offline Malware sites :18 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-08-12 06:35:07http://196.251.114.181/bins/o.xmlOfflinegeofenced mirai ext sh USA xml botnetkiller
2025-08-11 07:30:05http://196.251.114.181/bins/morte.i468Offlineelf ua-wget abuse_ch
2025-08-10 12:46:23http://196.251.114.181/bins/morte.ppcOfflineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-08-10 12:46:23http://196.251.114.181/bins/morte.arm7Offlineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-08-10 12:43:12http://196.251.114.181/bins/morte.arcOfflineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-08-10 12:43:07http://196.251.114.181/bins/debugOfflineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-08-10 12:43:07http://196.251.114.181/bins/morte.arm5Offlineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-08-10 12:43:07http://196.251.114.181/bins/morte.armOfflineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-08-10 12:42:15http://196.251.114.181/bins/morte.arm6Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-08-10 12:42:15http://196.251.114.181/bins/morte.mipsOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-08-10 12:42:12http://196.251.114.181/bins/morte.i686Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2025-08-10 12:42:12http://196.251.114.181/bins/morte.m68kOfflineelf geofenced m68k mirai ext ua-wget USA botnetkiller
2025-08-10 12:42:12http://196.251.114.181/bins/morte.sh4Offlineelf geofenced mirai ext SuperH ua-wget USA botnetkiller
2025-08-10 12:42:11http://196.251.114.181/bins/morte.mpslOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-08-10 12:42:11http://196.251.114.181/bins/morte.x86_64Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2025-08-10 12:42:11http://196.251.114.181/bins/morte.x86Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2025-08-10 12:42:11http://196.251.114.181/bins/morte.spcOfflineelf geofenced mirai ext sparc ua-wget USA botnetkiller
2025-08-10 12:42:11http://196.251.114.181/1.shOfflinegeofenced mirai ext sh ua-wget USA botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-08-19 05:00:1275bb4b7fedc7e0d8add3daf89194622239887075a823d1b60b7872ad61f443d8shMirai
2025-08-12 06:35:07c54f5d1de40f9635de5b43bc69064039a4d120c79fbe126927b28d2ed91f6815shMirai
2025-08-11 12:28:45d5c07001ad8a565f451d6f0ece703e68c1acc552b4ef85672c60f5f6ee0a004felfMirai
2025-08-11 12:26:178b45175fc2ac81934a449298b10b9d040c7c9645d9e744282b79535ff3892f48elfMirai
2025-08-11 11:56:30a3ffef056a3d62d106749d489819683a30cf2db48b6e265f12dc3494e9538895elfMirai
2025-08-11 11:37:07af5843158f13539f49d831a9980f20ab9b916a8bc124d2e95e1e30be9de86d76elfMirai
2025-08-11 08:29:15748e12e023eaa4c1d349efa65126224a484b6bec2667c9cff34140d0b7dd23a4elfMirai
2025-08-11 06:38:39d15d68e98575a59ef06a2822852faae0f74296c82fc565579a8999e59c8e120belfMirai
2025-08-11 06:34:451ceee7e5264174e8ecaf51b61ef423c4484beac1e2278db8a70af7d14649e84eelfMirai
2025-08-11 06:34:4268a55de8c554359d63be31102c7020843d1610a59348a064d42d2ddc84edbf4aelfMirai
2025-08-11 06:32:17888b144a8dfa1af4ec91915e37f96f52c4589cc2f9048d6574d2f69ca24871ceelfMirai
2025-08-11 06:19:506b440abc9ffc3afc2772281adca749d6c485bd4195619ef6ea4d264f9738adf3elfMirai
2025-08-11 06:18:525b4f9a2dad271887e3298e1f44659a080f05f78b0bf6f5c00f12c0201f87f1d2elfMirai
2025-08-11 06:06:12c7107f511fae8c78ad8a796b1fd293ce236c50c92ba33640fd908cbcd69eae17elfMirai
2025-08-11 06:05:40abce0be6a999f8e2514fdc1aa2704e8fd767b98c03305e36c22114bdf2f7f5a4elfMirai
2025-08-11 06:04:54a87bd91421093fd7e599c16b4861dc1c1cd7dd4b3a4a059c5750f118e86e33a3elfMirai
2025-08-11 05:54:368bc6abe5f1f3d9010949e535920ec4b8bb996c7c726c078d1c6d53b7647f814celfMirai
2025-08-10 12:46:23d91ec037d4a3bd3da8068121fd9d0447dd5eb7549051e7122b5d217cdb46af81elfMirai
2025-08-10 12:46:23aca86d90aef3a6b4ad4c0bab0bcac9b306e0f3db025b06735ece832013d40c11elfMirai
2025-08-10 12:43:12be3824168a5d476bec60bb9f771a5228fa752a6078a05ff079bdca0a4166cdfdelfMirai
2025-08-10 12:43:07a1fa785a37fd03276effde035c81addd23415dfa8ab4ccce30e7deb806d3bb24elfMirai
2025-08-10 12:43:074dcdfc88ddee2531c6caee9c75192843af953b42845654a86937ae82df6072eeelfMirai
2025-08-10 12:43:07463025059ff0ca611673e8419551b386ef8597f78cb00799ebba924ca45f17f4elfMirai
2025-08-10 12:42:152ce39c00011d45b712f7310b3d3738c592edcb581b981010f37ddb3853dfdbd9elfMirai
2025-08-10 12:42:15d17de3b065d524a85522d7ed5ab4b15575407c438be1ee5f892445b9148963bdelfMirai
2025-08-10 12:42:12157c027217ced4b50771bbc0e222dc4760f4a0f804763010d3a0a79d84cd0600elfMirai
2025-08-10 12:42:12bec7cd4fd3d3921bcb4b581fb9474610cd702b70f5f93d91bc0ee424cfc94ddaelfMirai
2025-08-10 12:42:11815ba825cad23a8791a89ce794d1df9048133a152c2b37ed05066b2d8c6a68e9elfMirai
2025-08-10 12:42:118f7c1622b81de5ba394145552b33b51e86a009392f7884408ba0507ea148b841elfMirai
2025-08-10 12:42:11921022e867133faf030885d2a04b10224417a897c499cd4ee2481ae9c9cd4cb6elfMirai
2025-08-10 12:42:11623a439ec19f826bdd9cd68d00e38279d60b5ccd8f6fab633b1c6e84207c75a1elfMirai
2025-08-10 12:42:11a9164fdfbb0423dd8f7117459ec89740fc110ccf18a0015360781188a1ecccbfshMirai
2025-08-10 12:42:11e41cf98b55686fca887f880de8ebb0d6b05e6b26649b0d95a59729081ac709f5elfMirai